Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: isi0RwVx9KANBvJgGkma40QRfOpe3IUCy1mkwJcQkCo=
Subject key identifier: F9:79:58:FC:F3:12:93:9D:CF:11:A3:E2:72:EB:13:09:01:E7:C7:D8
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 0196BF6EFE062BA168D6241D75E249493695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 0D42
Signing time: Sun 11 May 2025 13:00:44 +0000
Manifest this update: Sun 11 May 2025 13:00:44 +0000
Manifest next update: Mon 12 May 2025 13:00:44 +0000
Files and hashes: 1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: F98jDaITvIxqqv9wwo6nMkYOYjsXu8vEgX5DDK7NPow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:fe:06:2b:a1:68:d6:24:1d:75:e2:49:49:36:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: May 11 13:00:44 2025 GMT
Not After : May 12 13:00:44 2025 GMT
Subject: CN=f97958fcf312939dcf11a3e272eb130901e7c7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:f1:f9:8c:e4:c5:b4:20:76:6b:a5:8e:b6:
43:62:27:5f:f5:07:84:5c:05:7a:ea:ad:aa:54:10:
2d:ba:7b:80:2c:76:a0:44:32:7d:56:f4:88:6e:48:
37:b8:4b:5f:68:7e:a5:ad:62:da:84:69:cb:8a:91:
38:b5:79:bb:8b:df:83:b0:33:56:a1:d4:e9:0c:89:
f1:3a:04:fb:74:55:e4:7c:89:28:52:0c:9d:8b:05:
c6:95:91:f4:39:52:b1:e5:a9:cd:4a:32:9a:5d:3e:
fe:64:0f:63:1d:5f:7a:c5:ae:9b:57:82:ce:2b:b7:
60:f3:55:8f:e4:d1:29:d8:fa:d2:28:9e:c2:8b:e2:
23:8d:41:a0:8a:43:9e:27:74:04:09:b3:a8:3d:34:
ff:98:89:7e:54:ec:14:17:8b:83:96:eb:ce:35:49:
64:fd:f1:a0:fa:9e:b8:7a:df:a5:f4:48:4c:77:0f:
f0:1b:77:5a:e0:37:47:8e:d7:51:45:4b:80:3f:36:
e3:e9:70:62:cf:17:8c:5d:4b:7f:53:a1:7e:60:50:
c4:7d:ab:17:e4:b7:46:38:33:49:da:6d:75:7e:7c:
13:99:a2:63:cb:10:c8:9e:3f:91:39:05:9a:11:7d:
b3:5e:58:91:67:41:d5:3e:07:e8:a8:de:92:7f:09:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:58:FC:F3:12:93:9D:CF:11:A3:E2:72:EB:13:09:01:E7:C7:D8
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f8:50:a5:b0:d0:a7:60:db:a2:b0:d1:82:01:46:9f:6b:b4:
15:be:de:95:d0:9e:ab:21:94:5d:e1:6b:6f:94:36:71:8b:fb:
d6:b0:75:bf:4f:31:03:2c:cf:22:3c:c8:ee:d8:50:b9:4a:aa:
1e:cd:86:30:b0:74:97:e5:68:62:c8:e5:d2:4e:6f:04:d6:dd:
77:0b:cc:d7:b7:95:75:15:00:3a:fa:5b:87:7c:68:f5:53:1b:
36:e1:00:3b:89:cc:ea:9f:a7:3f:2c:82:cb:c3:f2:04:f4:85:
9c:10:28:e4:c3:d4:23:d5:72:e4:99:a2:68:24:65:f4:12:70:
b4:28:37:07:69:43:71:d6:c5:43:c5:bd:25:be:15:e8:2c:d7:
72:bb:01:a9:42:78:e7:69:e0:3f:f5:c1:e4:46:21:8a:b2:55:
4b:15:9e:7a:a6:8d:6d:c8:ad:9e:1d:6e:dd:b2:1c:c8:aa:56:
a5:8f:19:50:d4:8f:85:d7:69:d3:35:fd:8c:65:ff:ad:3f:10:
a9:9f:f3:dc:3d:76:c2:40:ef:83:89:58:0c:f9:5f:1b:ee:96:
9d:5f:04:be:70:ff:c7:65:ad:03:4f:10:87:e2:3e:df:87:e6:
b8:8f:d8:31:63:a2:86:96:48:9e:07:81:99:c2:84:3f:f0:17:
dd:9b:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:00:55 2025 by rpki-client